import KeycloakAdminClient from "@keycloak/keycloak-admin-client"; import type ClientRepresentation from "@keycloak/keycloak-admin-client/lib/defs/clientRepresentation"; import type ClientScopeRepresentation from "@keycloak/keycloak-admin-client/lib/defs/clientScopeRepresentation"; import type RealmRepresentation from "@keycloak/keycloak-admin-client/lib/defs/realmRepresentation"; import type RoleRepresentation from "@keycloak/keycloak-admin-client/lib/defs/roleRepresentation"; import type { RoleMappingPayload } from "@keycloak/keycloak-admin-client/lib/defs/roleRepresentation"; import type { UserProfileConfig } from "@keycloak/keycloak-admin-client/lib/defs/userProfileConfig"; import type UserRepresentation from "@keycloak/keycloak-admin-client/lib/defs/userRepresentation"; import { merge } from "lodash-es"; class AdminClient { private readonly client = new KeycloakAdminClient({ baseUrl: Cypress.env("KEYCLOAK_SERVER"), realmName: "master", }); private login() { return this.client.auth({ username: "admin", password: "admin", grantType: "password", clientId: "admin-cli", }); } async loginUser(username: string, password: string, clientId: string) { return this.client.auth({ username: username, password: password, grantType: "password", clientId: clientId, }); } async createRealm(realm: string, payload?: RealmRepresentation) { await this.login(); await this.client.realms.create({ realm, ...payload }); } async updateRealm(realm: string, payload: RealmRepresentation) { await this.login(); await this.client.realms.update({ realm }, payload); } async getRealm(realm: string) { await this.login(); return await this.client.realms.findOne({ realm }); } async deleteRealm(realm: string) { await this.login(); await this.client.realms.del({ realm }); } async createClient(client: ClientRepresentation) { await this.login(); await this.client.clients.create(client); } async deleteClient(clientName: string) { await this.login(); const client = ( await this.client.clients.find({ clientId: clientName }) )[0]; if (client) { await this.client.clients.del({ id: client.id! }); } } async createGroup(groupName: string) { await this.login(); return await this.client.groups.create({ name: groupName }); } async createSubGroups(groups: string[]) { await this.login(); let parentGroup = undefined; const createdGroups = []; for (const group of groups) { if (!parentGroup) { parentGroup = await this.client.groups.create({ name: group }); } else { parentGroup = await this.client.groups.createChildGroup( { id: parentGroup.id }, { name: group }, ); } createdGroups.push(parentGroup); } return createdGroups; } async deleteGroups() { await this.login(); const groups = await this.client.groups.find(); for (const group of groups) { await this.client.groups.del({ id: group.id! }); } } async createUser(user: UserRepresentation) { await this.login(); const { id } = await this.client.users.create(user); const createdUser = await this.client.users.findOne({ id }); if (!createdUser) { throw new Error( "Unable to create user, created user could not be found.", ); } return createdUser; } async updateUser(id: string, payload: UserRepresentation) { await this.login(); return this.client.users.update({ id }, payload); } async getAdminUser() { await this.login(); const [user] = await this.client.users.find({ username: "admin" }); return user; } async addUserToGroup(userId: string, groupId: string) { await this.login(); await this.client.users.addToGroup({ id: userId, groupId }); } async createUserInGroup(username: string, groupId: string) { await this.login(); const user = await this.createUser({ username, enabled: true }); await this.client.users.addToGroup({ id: user.id!, groupId }); } async addRealmRoleToUser(userId: string, roleName: string) { await this.login(); const realmRole = await this.client.roles.findOneByName({ name: roleName }); await this.client.users.addRealmRoleMappings({ id: userId, roles: [realmRole as RoleMappingPayload], }); } async deleteUser(username: string) { await this.login(); const user = await this.client.users.find({ username }); await this.client.users.del({ id: user[0].id! }); } async createClientScope(scope: ClientScopeRepresentation) { await this.login(); return await this.client.clientScopes.create(scope); } async deleteClientScope(clientScopeName: string) { await this.login(); const clientScope = await this.client.clientScopes.findOneByName({ name: clientScopeName, }); return await this.client.clientScopes.del({ id: clientScope?.id! }); } async existsClientScope(clientScopeName: string) { await this.login(); return (await this.client.clientScopes.findOneByName({ name: clientScopeName, })) == undefined ? false : true; } async addDefaultClientScopeInClient( clientScopeName: string, clientId: string, ) { await this.login(); const scope = await this.client.clientScopes.findOneByName({ name: clientScopeName, }); const client = await this.client.clients.find({ clientId: clientId }); return await this.client.clients.addDefaultClientScope({ id: client[0]?.id!, clientScopeId: scope?.id!, }); } async removeDefaultClientScopeInClient( clientScopeName: string, clientId: string, ) { await this.login(); const scope = await this.client.clientScopes.findOneByName({ name: clientScopeName, }); const client = await this.client.clients.find({ clientId: clientId }); return await this.client.clients.delDefaultClientScope({ id: client[0]?.id!, clientScopeId: scope?.id!, }); } async patchUserProfile(realm: string, payload: UserProfileConfig) { await this.login(); const currentProfile = await this.client.users.getProfile({ realm }); await this.client.users.updateProfile( merge(currentProfile, payload, { realm }), ); } async createRealmRole(payload: RoleRepresentation) { await this.login(); return await this.client.roles.create(payload); } async deleteRealmRole(name: string) { await this.login(); return await this.client.roles.delByName({ name }); } async createIdentityProvider(idpDisplayName: string, alias: string) { await this.login(); const identityProviders = (await this.client.serverInfo.find()).identityProviders || []; const idp = identityProviders.find(({ name }) => name === idpDisplayName); await this.client.identityProviders.create({ providerId: idp?.id!, displayName: idpDisplayName, alias: alias, }); } async deleteIdentityProvider(idpAlias: string) { await this.login(); await this.client.identityProviders.del({ alias: idpAlias, }); } async unlinkAccountIdentityProvider( username: string, idpDisplayName: string, ) { await this.login(); const user = await this.client.users.find({ username }); const identityProviders = (await this.client.serverInfo.find()).identityProviders || []; const idp = identityProviders.find(({ name }) => name === idpDisplayName); await this.client.users.delFromFederatedIdentity({ id: user[0].id!, federatedIdentityId: idp?.id!, }); } async linkAccountIdentityProvider(username: string, idpDisplayName: string) { await this.login(); const user = await this.client.users.find({ username }); const identityProviders = (await this.client.serverInfo.find()).identityProviders || []; const idp = identityProviders.find(({ name }) => name === idpDisplayName); const fedIdentity = { identityProvider: idp?.id, userId: "testUserIdApi", userName: "testUserNameApi", }; await this.client.users.addToFederatedIdentity({ id: user[0].id!, federatedIdentityId: idp?.id!, federatedIdentity: fedIdentity, }); } async addLocalizationText(locale: string, key: string, value: string) { await this.login(); await this.client.realms.addLocalization( { realm: this.client.realmName, selectedLocale: locale, key: key }, value, ); } async removeAllLocalizationTexts() { await this.login(); const localesWithTexts = await this.client.realms.getRealmSpecificLocales({ realm: this.client.realmName, }); await Promise.all( localesWithTexts.map((locale) => this.client.realms.deleteRealmLocalizationTexts({ realm: this.client.realmName, selectedLocale: locale, }), ), ); } } const adminClient = new AdminClient(); export default adminClient;